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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method for establishing a_secure communications 
session between a ca lli ng party first computing device and a ca lle d partv second 
computing device , cons i st i ng e ss e nt i a ll y the method comprising ef : 

i d e nt i fy i ng retrieving a first shar e d random number assoc i at e d w i th a ca lle d 
eaft yat the first computing device : 

i d e nt i fy i ng retrieving a second shar e d random number assoc i at e d w i th a ca lli ng 
eaft yat the second computing device : 

sa i d ca lle d party g e n e rat i ng retrieving - a t least one public-private key pair 
including a public key and a private key; 

transm i tt i ng sending a fifst message from said ca lle d party second computing 
device to said ca lli ng party first computing device , said fifst-message from said second 
computing device to said first computing device including said first shar e d random 
number and said -the public key of said at least one public-private key pair to thereby 
share at least said first random number with said first communication device , said fifst 
message from said second computing device to said first computing device being 
e ncod e d encrypted w ith a n encoded symm e tr i c e ncrypt i on k e y password : 

providing said encoded password to said first computing device: 

using said provided encoded password to decrypt said first message at said first 
computing device to obtain at least said first random number that said second 
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computing device sent in said message from said second computing device to said first 
computing device: 

transm i tt i ng sending a s e cond message from said ca lli ng party first computing 
device to said ca lle d party second computing device , said s e cond message from said 
first computing device to said second computing device including said second shar e d 
random number, said secoFt^ first computing device encrypting said message b ei ng 
e ncod e d it sends to said second computing device w i th sa i d pub li c k e y of sa i d pub li c - 
pr i vat e k e y pa i r ; m4 

generating, at each of said first and second computing devices, obta i n i ng a 
shared secre^ session key from an output of a comb i n i ng funct i on hav i ng a f i rst i nput 
i nc l ud i ng by combining said first shar e d random number and hav i ng a s e cond i nput 
i nc l ud i ng sa i d second shar e d random numbe r that is now available to each of said first 
and second computing devices through said above-mentioned message exchanges: 
and 

using said shared session key to establish a secure private communication 
session between said first and second computing devices.v 

2. (Currently amended.) The method of claim 1 , wherein said combining 
funct i on includes a logical function. 

3. (Previously Presented.) The method of claim 2, wherein said logical 
function includes an exclusive or (XOR) function. 

4. (Cancelled.) 

5. (Cancelled.) 

6. (Cancelled) 
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7. (Cancelled.) 

8. (Cancelled) 

9. (Cancelled.) 

10. -153. (Cancelled.) 

154 (Currently amended). A method for establishing secure communication 
between a calling party and a called party, comprising: 

generating, on demand at the called party, an asymmetric key pair including a 
public key and a private key; 

transmitting, from said called party to said calling party, a first encrypted 
message including a first random number and said public key of said asymmetric key 
pair, said called party encrypting said first message with a n encoded password 
symm e tr i c e ncrypt i on k e y known to both the calling party and the called party ; 

said calling party receiving and decrypting said first encrypted message using 
said symm e tr i c e ncrypt i on k e y encoded password to obtain said first random number 
and said public key; 

said calling party transmitting, to said called party, a second encrypted message 
including a second random number, said calling party encrypting said second message 
with said public key of said asymmetric key pair; 

said called party receiving and decrypting said second encrypted message to 
obtain said second random number; 

said calling and called parties each independently applying said now-shared first 
and second random numbers to combining functions to thereby each independently 
generate a shared secret key; and 
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said calling and called parties encrypting further comnnunications therebetween 
at least in part using said shared secret key. 

155 (Previously presented). The method of claim 154 wherein said symmetric 
encryption key comprises a password. 

156 (New). The method of claim 1 wherein said password comprises a user 
password. 

157 (New). The method of claim 1 wherein said encoded password comprises a 
user password encoded with a hash function. 

158 (New). The method of claim 1 further including generating said first and 
second random numbers on demand. 

159 (New). The method of claim 1 further including generating said public- 
private key pair on demand. 

160 (New). The method of claim 1 wherein said second computing device 
comprises a server, and said first computing device comprises a client wishing to 
communicate with said server. 

161 (New). The method of claim 1 wherein said first computing device uses said 
public key obtained from said message send from said second computing device to said 
first computing device to encrypt said message from said first computing device to said 
second computing device. 

162 (New). The method of claim 1 further including prompting a user to input a 
password into said first computing device, and encoding said inputted password at said 
first computing device to provide said encoded password. 
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163 (New). The method of claim 154 wherein said called party comprises a 
server and said calling party comprises a client that wishes to communicate with said 
server. 

164 (New). The method of claim 154 further including said called party 
retrieving said password or encoded password from a user database in response to 
receipt of a request by said calling party for a secure communication. 

165 (New). The method of claim 154 wherein said generating comprises 
generating said asymmetric key pair at said called party. 

166 (New). The method of claim 154 wherein said encrypted communication 
proceeds between said calling party and said called party without requiring said calling 
party to generate an asymmetric key pair. 
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